Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/4ywUuiSneyFDX1HaZmr2VGiC4iQ.roa
File: 4ywUuiSneyFDX1HaZmr2VGiC4iQ.roa (raw, json)
Hash identifier: xLj4FDioLT99POFOyMB7TzXn06Hpck+ZpwX95y8VY7k=
Subject key identifier: E3:2C:14:BA:24:A7:7B:21:43:5F:51:DA:66:6A:F6:54:68:82:E2:24
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C64A4B9DD3EC03506BECD46A49F65AE3B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/4ywUuiSneyFDX1HaZmr2VGiC4iQ.roa
Signing time: Wed 13 Dec 2023 19:26:06 +0000
ROA not before: Wed 13 Dec 2023 19:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:a4:b9:dd:3e:c0:35:06:be:cd:46:a4:9f:65:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 13 19:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e32c14ba24a77b21435f51da666af6546882e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:35:be:a0:66:ed:fc:47:76:3c:db:9f:24:
15:2d:1b:8d:71:b6:88:2f:b4:85:38:06:9e:37:e7:
2b:c4:a5:7a:38:c6:b8:7e:7b:4d:59:35:50:db:ec:
91:0e:9d:d8:35:16:f5:1f:a5:75:21:e4:71:47:d9:
ef:88:1b:5a:8b:6c:6c:4f:9e:b6:e7:86:9f:8b:96:
aa:7e:a8:dc:a5:86:41:c5:9c:f5:4a:0f:8e:e7:90:
66:6d:a1:7e:70:05:e2:8f:28:4e:5e:07:5d:5d:7c:
3b:a4:e4:1c:58:3a:ed:5f:7a:ca:55:a7:e6:4a:6f:
b2:4d:97:55:54:d9:8b:81:77:c3:02:77:dc:b0:3e:
67:51:88:88:c9:f2:b7:ab:fe:9a:e5:46:8f:65:26:
4a:86:a9:76:60:e7:c6:5a:07:09:70:d5:32:8d:12:
70:89:58:14:c9:c2:c2:e3:ae:46:d3:6c:7e:ab:34:
04:97:bc:e1:a7:0f:f3:e4:e4:3e:0f:5b:e9:6e:2d:
75:5f:fd:e4:61:f9:02:5e:4a:ac:fe:5b:22:cb:4b:
66:44:69:4e:1e:f4:3a:1b:da:ff:24:67:dc:63:e5:
3d:a4:26:6c:52:74:66:06:b6:af:e0:7d:a5:2c:b5:
e0:bf:27:0b:2a:f4:ea:bf:30:5d:81:9b:41:b4:2b:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:14:BA:24:A7:7B:21:43:5F:51:DA:66:6A:F6:54:68:82:E2:24
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/4ywUuiSneyFDX1HaZmr2VGiC4iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2e:8b:31:74:3f:81:f8:eb:e5:26:0f:c6:00:52:4e:b7:0e:
68:bc:1a:c1:f8:a2:b2:c4:63:f5:13:ff:24:80:92:44:79:28:
cf:c9:a9:41:a9:d0:7b:22:da:6e:8b:94:a7:59:45:b9:94:7f:
fa:fa:0f:f9:18:fd:3d:6a:44:d1:a6:7c:d4:ad:57:e9:2e:d5:
62:7c:46:2c:54:42:71:94:b7:44:80:10:e0:98:48:bd:da:a6:
c4:70:7c:5d:5b:ac:ed:c7:71:16:b8:c3:b4:68:09:c3:71:9b:
19:4d:98:30:41:b5:61:db:20:d0:e2:40:e0:ee:75:ac:19:31:
6d:b2:9a:4a:4c:dd:7e:aa:59:6a:c4:89:af:8d:e9:18:08:97:
21:e1:96:87:a4:3a:04:56:62:7f:7a:b7:bd:39:a3:b9:db:6c:
5e:c2:e6:93:32:24:3a:36:fb:cf:81:c3:f2:14:f8:06:55:f0:
1a:74:78:fe:7f:ac:ec:9f:e6:7b:75:e7:9c:5f:38:82:d5:4a:
4b:f3:23:27:17:31:f4:53:b9:f5:d0:47:b6:7e:75:04:e2:dd:
6b:e0:58:87:60:0a:c1:58:0e:2e:0e:9d:2d:3b:4c:cb:50:9b:
f5:81:99:98:5c:e7:10:bc:f9:24:a4:c8:d5:1c:fe:5c:93:09:
b4:52:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:49:56 2025 by rpki-client